<html>
  <head>
    <meta http-equiv="Content-Security-Policy"
    content="form-action 'none'">
  </head>
  <body>
    No form submission is allowed.
  </body>
</html>
